Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
File: Uylu4zFT725pONV6KhMsHlJtxDA.mft (raw, json)
Hash identifier: 3ONA/0ijHZn23vvqaibM59uvv2H9WfKqZ2wiBmnsL1Y=
Subject key identifier: EC:89:78:6F:BD:0C:A4:6B:05:E0:A8:0D:4C:90:80:9C:9A:50:60:2A
Authority key identifier: 53:29:6E:E3:31:53:EF:6E:69:38:D5:7A:2A:13:2C:1E:52:6D:C4:30
Certificate issuer: /CN=53296ee33153ef6e6938d57a2a132c1e526dc430
Certificate serial: 019A4E4F740D5478B120C5FAB22F554582A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
Manifest number: 15E2
Signing time: Tue 04 Nov 2025 10:00:21 +0000
Manifest this update: Tue 04 Nov 2025 10:00:21 +0000
Manifest next update: Wed 05 Nov 2025 10:00:21 +0000
Files and hashes: 1: Uylu4zFT725pONV6KhMsHlJtxDA.crl (hash: +jmZ53Bc04PtWDNsmDqOR5mLBdpM1GhH0yF4v2WRbZc=)
2: kWgx2Wjql2LYt0QNUa7UD3E-ZNs.roa (hash: NPB7ZX6Td6/rM0WpZJID5mJD7qpTT41mPi5DDVNwg5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:74:0d:54:78:b1:20:c5:fa:b2:2f:55:45:82:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53296ee33153ef6e6938d57a2a132c1e526dc430
Validity
Not Before: Nov 4 10:00:21 2025 GMT
Not After : Nov 5 10:00:21 2025 GMT
Subject: CN=ec89786fbd0ca46b05e0a80d4c90809c9a50602a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d8:2a:ee:35:62:19:65:c1:75:dd:a5:51:ad:
b5:24:95:e3:08:51:9f:12:32:b0:eb:80:4e:50:f2:
6e:4b:db:b7:30:c0:1c:23:4e:f5:5f:0b:3a:c3:b0:
18:18:c1:6d:68:bf:49:a8:05:5d:0d:d5:d1:9d:4e:
b2:65:1c:fb:d4:69:fd:81:0a:d1:85:04:9a:78:65:
65:f2:ac:e8:93:14:82:19:91:cf:d2:84:e3:b2:6f:
c4:dd:77:20:98:7b:07:1d:31:54:92:1b:89:43:1a:
26:54:2d:1f:36:07:ec:a0:c3:27:2d:01:a9:7a:c6:
45:d9:ce:a1:ad:ff:37:1a:36:6d:d1:62:cb:70:26:
2d:b1:89:c5:24:e1:75:31:bc:ab:0e:91:fa:00:52:
e3:79:6f:6e:89:3e:9c:8b:0e:4d:3b:84:08:fe:9f:
0d:aa:54:09:52:c8:8f:04:69:1b:ba:21:22:80:55:
2b:2c:d6:7a:74:2a:cc:1a:75:33:4e:95:98:c9:92:
8a:dd:42:35:e4:b2:52:b2:6f:f2:ec:d4:0d:5a:66:
89:2e:fe:1c:a1:c7:c4:d6:61:53:28:45:fb:52:32:
41:e2:12:f4:46:b6:a5:45:74:1b:4e:9e:be:83:77:
e1:a9:ba:ab:fc:09:9f:00:0c:a6:21:8a:ea:16:8a:
b8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:89:78:6F:BD:0C:A4:6B:05:E0:A8:0D:4C:90:80:9C:9A:50:60:2A
X509v3 Authority Key Identifier:
keyid:53:29:6E:E3:31:53:EF:6E:69:38:D5:7A:2A:13:2C:1E:52:6D:C4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:02:12:e0:76:d7:fe:f3:b9:18:d1:15:60:fa:1b:2b:d1:4a:
35:e6:06:b9:b9:7a:9b:1e:26:59:27:64:0d:b9:90:c6:f1:a3:
59:1d:d6:ea:87:1b:43:23:29:7d:a3:93:40:5d:d4:b1:ab:4b:
7a:f0:13:b8:f7:38:a7:ff:8e:fc:b7:30:ea:96:d2:df:98:a5:
e7:f7:79:0d:4e:9c:bd:11:8f:b3:7a:e0:e2:77:44:0e:83:d2:
d7:a8:16:cf:16:80:91:02:64:d3:c1:82:73:95:00:89:2e:56:
a1:7a:aa:b9:f0:53:b2:c0:a4:4c:97:b3:e4:64:d7:d5:22:29:
bd:d4:00:44:04:b3:db:67:e2:c5:0b:7d:77:2d:86:65:4a:26:
32:7e:fa:90:cb:b4:0c:fe:c8:2f:f6:83:04:6f:1a:d4:a4:f6:
f1:a3:6f:73:dd:70:e4:b6:74:04:c2:f1:14:b1:8a:e7:3b:d3:
54:a8:4f:6a:27:47:5f:0f:76:c7:e0:75:b4:8f:8d:2f:3f:9d:
c5:ea:2f:a8:da:b6:da:a0:8e:df:69:53:88:8e:72:aa:d4:af:
09:0a:77:88:11:38:65:5b:81:ac:c7:38:91:b5:d6:67:95:d8:
3d:71:ab:45:8e:0f:95:bb:6b:0d:06:f3:9b:98:d8:d2:6c:1f:
e1:ff:c8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:02 2025 by rpki-client